227

GitHub - rani-i/Mi365Locker: Xiaomi Mi365 Scooter locker

 5 years ago
source link: https://github.com/rani-i/Mi365Locker
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.

README.md

XiaomiM365Locker

The app allows you to search for Xiaomi scooters lock & unlock the devices. This security concerned was put to the attention of Xiaomi and disclosed responsibly. Xiaomi responded it is publicly known and it is a third party.

PoC for iOS - https://github.com/chilik/Mi365Locker-iOS

References

Android library for BLE communication - https://github.com/Polidea/RxAndroidBle

Most of the BLE commands - https://github.com/maisi/M365-Power

Blog post - https://blog.zimperium.com/dont-give-me-a-brake-xiaomi-scooter-hack-enables-dangerous-accelerations-and-stops-for-unsuspecting-riders/

TODOs

  • Add check whether the BLE device is scooter by catching BadCharacteristic exception
  • Add remote install firmware from that code instead of different app.

Disclaimer

The app is intended to be used for education purposes only. Keep in mind not to risk your surroundings, add your scooter name or the mac address to whitelist.

@RaniXCH


About Joyk


Aggregate valuable and interesting links.
Joyk means Joy of geeK